Validating role inclusions